🔴 Critical: Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0
-
Cisco has released another wave of security updates addressing nine vulnerabilities across its Crosswork platform suite and Secure Workload Software. These patches stem from an ongoing internal security review and include five flaws rated with a perfect CVSS score of 10.0, indicating critical severity.
Four of the vulnerabilities affect Crosswork Data Gateway, Crosswork Network Controller, and Crosswork Planning, and they apply regardless of the device configuration. The remaining issues impact Secure Workload Software, with the fixes now available through standard Cisco update channels.
- Affected products: Crosswork Data Gateway, Crosswork Network Controller, Crosswork Planning, and Secure Workload Software.
- Severity: Five of the nine flaws carry a CVSS score of 10.0; four are rated lower but still warrant immediate patching.
- The vulnerabilities are present irrespective of configuration, meaning any deployment of the affected products is at risk.
Cisco has not disclosed specific technical details for each flaw, but the updates should be prioritized given the maximum severity ratings. Administrators are advised to review their current software versions and apply the patches without delay to mitigate potential exploitation.
Source: The Hacker News
Are you running any of the affected Crosswork or Secure Workload components, and how are you prioritizing these critical patches alongside your other vulnerability management tasks?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login